On 22/11/13 15:57, Adam Bishop wrote: > In the default inner-tunnel post-auth block there's a config block to > inject the real username into the outer Access-Accept, however it > doesn't seem to do that on FreeRADIUS 3/3.1: Interesting. It might be the use of "=" rather than ":=". But I'm puzzled exactly why. Try changing to: User-Name := ..."